C:\Users\condor\Desktop\6666Client-built.exe.netz\999.pdb
Static task
static1
Behavioral task
behavioral1
Sample
23395541d41a67c4e3c3649aed1039f042500781428a5afab1c3ebb3ebca56a4.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
23395541d41a67c4e3c3649aed1039f042500781428a5afab1c3ebb3ebca56a4.exe
Resource
win10v2004-20240802-en
General
-
Target
88528aaf0530d3ce91dd4a14982cfa1e379a45ed35e76b626bbd18f0f3370f18
-
Size
255KB
-
MD5
596ee2381ca89d6730763f305f27092c
-
SHA1
0c5934db4241b0a47e5c0c98974721a1325d8026
-
SHA256
88528aaf0530d3ce91dd4a14982cfa1e379a45ed35e76b626bbd18f0f3370f18
-
SHA512
65cc609f352cec7e710d9ed9712d32cc9b25e13a249e0e23d60a01d408567cbb18c8d682a9d779ff22b89d3a8b26050b1d92efeae01a4b081317514fed90442f
-
SSDEEP
6144:NKIzhfoc9XrDpKz/vxUOeKtdCus6fmAgAzy:5fo4nAz/vaKdnWAgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/23395541d41a67c4e3c3649aed1039f042500781428a5afab1c3ebb3ebca56a4
Files
-
88528aaf0530d3ce91dd4a14982cfa1e379a45ed35e76b626bbd18f0f3370f18.zip
Password: infected
-
23395541d41a67c4e3c3649aed1039f042500781428a5afab1c3ebb3ebca56a4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ